Draft — pending legal review. This is placeholder MVP content, not reviewed by counsel. It should not be relied on as a final Privacy Policy before launch.

Privacy Policy

Last updated: 12 September 2026

1. Who we are

This service is operated by Puka Consulting Group, Inc. ("we", "us"). For any question about the data described below, contact corporate@pukaconsulting.com.

2. What we collect

When you use the Rundown or create an account, we collect:

  • Email address
  • A password, if you set one — stored only as a salted hash, never in plain text
  • Nationality
  • Date of entry into the Philippines
  • Whether you hold an ACR I-Card, and its expiry date, if provided
  • A display name for each tracked profile
  • Confirmations you make of which compliance stage you've completed, and any note you attach to them

All of the above is personal information under the Philippine Data Privacy Act of 2012 (RA 10173). We do not collect passport scans or other identity documents in this version of the service.

3. Why we collect it

We use this information to calculate which stage of the Bureau of Immigration's tourist-extension process applies to you, to estimate applicable fees and overstay exposure, and to send you email reminders before your filing deadlines if you've opted in. We do not use it for advertising, and we do not sell it.

4. Who else sees it

We share data with the following processors, only as needed to run the service:

  • Neon (database hosting, PostgreSQL)
  • Resend (delivery of reminder and sign-in emails)
  • Vercel (application hosting and scheduled jobs)

We do not share your data with any other third party, and we do not sell it.

5. How long we keep it

We keep your data for as long as your account is active. You can ask us to delete your account and associated data at any time by emailing corporate@pukaconsulting.com.

6. Your rights

Under RA 10173, you have the right to access, correct, and request deletion of your personal information, and to object to or withdraw consent for its processing. Withdrawing consent for reminder emails only stops emails — it does not delete your account.

7. Changes to this policy

We may update this policy as the service changes. Material changes will be reflected by updating the date above.